Director, Information Security

Responsibilities

• Architect the enterprise security posture and transition from startup to enterprise-grade security
• Build the team, processes, and technical controls to protect sensitive patient data
• Own the 12–24 month roadmap to achieve HITRUST Certification
• Manage the intersection of HIPAA and 42 CFR Part 2 compliance
• Balance AppSec/SecOps engineering with disciplined governance

Requirements

• 10+ years in Information Security
• Direct experience leading HITRUST CSF or SOC2 Type II certification in a healthcare context
• Expert-level knowledge of HIPAA and working understanding of 42 CFR Part 2
• Experience in a Series C+ startup environment
• Strong background in AppSec and SecOps
• Exceptional communication and leadership skills

Preferred Qualifications

• Experience managing privacy nuances of controlled substance prescribing
• CISSP...